Cloud & Infra

AWS is like a giant magical warehouse where you can rent computers, storage, databases, and basically anything tech-related — by the minute.

API Gateway is the bouncer at your API nightclub.

Amplify is AWS's 'make a full-stack app without crying' toolkit. It gives you auth, a database, file storage, and hosting all wrapped up in a nice CLI.

AppSync is AWS's managed GraphQL service — you define your schema, point it at your data sources, and it handles the rest.

CDK lets you define your cloud infrastructure using actual programming languages instead of YAML.

CloudFormation is AWS's way of letting you describe your entire infrastructure in a YAML or JSON file.

CloudWatch is AWS's built-in monitoring system. It watches your stuff — CPU usage, error rates, response times — and yells at you when things go sideways.

Cognito is AWS's 'please don't build your own auth' service.

Direct Connect is a physical, dedicated cable from your data center to AWS. No public internet, no shared bandwidth, no 'hope for the best' latency.

EventBridge is like a post office for your cloud events.

Global Accelerator gives your app two static IP addresses that act as a front door to AWS's global network.

Kinesis is like a firehose for data. Millions of events per second — clickstreams, IoT sensors, log files — all streaming through in real time.

Parameter Store is the free, simpler cousin of Secrets Manager.

SAM is CloudFormation's serverless-focused little sibling. Instead of writing 200 lines of YAML to deploy a Lambda, you write 20.

SES is AWS's email sending service. Need to send a million password reset emails? SES has you covered.

Secrets Manager is like a vault for your passwords, API keys, and database credentials.

Step Functions is like a flowchart that actually runs.

Systems Manager is AWS's Swiss Army knife for managing your infrastructure. Need to SSH into a server without opening port 22?

Transit Gateway is like a central train station for your VPCs.

X-Ray lets you trace a request as it bounces through your microservices like a ball in a pinball machine.

Alert fatigue is when you get so many monitoring alerts that you stop reading them. Your phone buzzes 50 times a day with warnings that are 'normal.

Anycast is a networking trick where the same IP address exists in multiple locations.

App Engine is Google's original PaaS from 2008 — one of the first 'just deploy your code' platforms.

Archive storage is the cheapest tier of cloud storage for data you almost never access.

Imagine a database that falls asleep when nobody's using it and wakes up instantly when traffic arrives — like a cat that somehow costs you nothing while n

Auto scaling is when the cloud automatically adds more servers when traffic spikes and removes them when it drops, so you're not paying for idle machines a...

Auto-failover automatically switches to a backup system when the primary one fails — no human intervention needed. Your database server dies at 3 AM?

An Availability Zone is one of several separate data centers within a cloud region.

Azure is Microsoft's cloud — and if your company already runs on Windows, Active Directory, and Office 365, Azure fits like a glove because everything talk...

BaaS is when someone provides you a ready-made backend so you can build your frontend without writing any server code.

A backup strategy is your plan for making copies of everything important and being able to restore them.

A bastion host is a hardened server that acts as the only entry point into your private network. Want to SSH into a private instance?

Blast radius is how much damage something can cause when it goes wrong. A bug in a low-traffic admin page? Small blast radius.

Blob storage is just a fancy name for storing unstructured data — images, videos, PDFs, audio files, any binary stuff.

Block storage is like a virtual hard drive that you attach to a cloud server.

A buildpack is a script that knows how to take your code and turn it into something runnable. There's a Node.

A CDN is a network of servers spread around the world that store copies of your files.

Canary deployment is releasing your new code to a tiny percentage of users first to see if it explodes.

Cloud Build is GCP's CI/CD service that runs your build, test, and deploy pipeline in the cloud.

Cloud computing means using computers that live in someone else's giant warehouse instead of your own machine.

Cost anomaly detection watches your cloud bill for unexpected spikes. Someone accidentally left 100 GPU instances running?

Cloud cost management is the art of not going bankrupt running things in the cloud.

A cloud firewall is a virtual bouncer that controls what traffic can enter and leave your cloud resources.

A cloud function is a piece of code you deploy to the cloud that runs when triggered — by an HTTP request, a file upload, a timer, or another event.

A Cloud IDE is a full development environment running in the cloud, accessible from your browser.

Cloud Interconnect is Google's version of AWS Direct Connect — a dedicated physical connection from your data center to Google Cloud.

Cloud native means building apps specifically designed to live in and take advantage of the cloud — microservices, containers, auto scaling, managed databa...

Cloud Native Buildpacks automatically detect your app's language, install dependencies, and create an OCI container image — no Dockerfile needed.

Cloud Run is GCP's magic platform for running containerized apps without managing servers.

Cloud Shell is a terminal in your browser provided by your cloud provider. It comes pre-loaded with CLIs, SDKs, and tools — no local installation needed.

Google built a database that's both relational AND globally distributed, which is supposed to be impossible — like a car that's also a boat AND a plane. Cl

Cloud storage is just storing your files on someone else's servers in the cloud instead of your own hard drive.

Cloud VPN creates an encrypted tunnel between your on-premises network and your cloud VPC. Your office and the cloud become one seamless network.

CloudFront is AWS's CDN — it copies your files to data centers all over the world so users get content from a server near them instead of one far away.

Cloudflare is like a superhero shield in front of your website.

D1 is Cloudflare's serverless SQL database built on SQLite. Yes, SQLite — but replicated globally and accessible from Workers.

Durable Objects give you stateful compute at the edge.

KV is Cloudflare's key-value store at the edge. Think of it as a giant distributed dictionary — put a key in, get a value out, globally replicated.

Cloudflare Pages is like Vercel or Netlify but running on Cloudflare's edge network. Push to Git, it builds and deploys your site globally.

Cloudflare Queues is a message queue for Workers. Producer Worker sends a message, Consumer Worker processes it later.

R2 is Cloudflare's S3-compatible object storage with one killer feature: zero egress fees. Every time you read data from S3, AWS charges you.

Turnstile is Cloudflare's CAPTCHA replacement that doesn't make you click on traffic lights.

Workers run JavaScript at the edge — on Cloudflare's network of 300+ data centers worldwide. Your code executes in milliseconds, right next to the user.

A cold start is the delay you get when a serverless function hasn't been used for a while and the cloud needs to spin up a fresh container to run it.

Container orchestration is the art of managing hundreds or thousands of containers automatically. Which server does this container run on?

Same thing as a CDN — a worldwide network of servers that deliver your content from the closest location to each user.

Coolify is the self-hosted Vercel/Netlify/Heroku you've been dreaming about.

Crossplane lets you manage cloud infrastructure (databases, buckets, VPCs) using Kubernetes YAML instead of Terraform.

A data center is a giant warehouse full of servers, cooling systems, and power backup.

Data transfer pricing is how cloud providers charge you for moving data in and out. Data IN is usually free (they want your data!).

DigitalOcean is the developer-friendly cloud that says 'we know AWS is confusing, here are cheap Linux servers with clean docs.

Disaster recovery (DR) is your plan for when everything goes absolutely wrong — data center floods, region-wide outage, ransomware attack.

Drift detection is the process of comparing what your infrastructure actually looks like versus what your code says it should look like.

Durable Objects are like tiny servers that live at the edge and remember things.

DynamoDB is Amazon's NoSQL database that scales to literally any size without you doing anything.

DynamoDB Streams is like putting a security camera on your database table.

EC2 is AWS's way of renting you a virtual computer in the cloud. You pick how powerful it is, what OS it runs, and pay by the hour.

ECS is AWS's system for running Docker containers at scale.

EKS is managed Kubernetes on AWS. Kubernetes is the industry-standard system for orchestrating containers, but setting it up yourself is famously painful.

Your server is in Virginia. Your user is in Tokyo. Every request travels 10,000 km and back.

Edge Config is like a tiny config file that lives everywhere in Vercel's network simultaneously.

Edge functions run your code at the CDN edge — meaning close to the user, not in some faraway data center.

An edge network is a constellation of servers placed as close to end users as possible — in major cities worldwide.

Edge Runtime is like having tiny copies of your server scattered around the world in every city, so your code runs right next to the user instead of in som

Egress is data leaving the cloud — going OUT.

Egress fees are what cloud providers charge when data leaves their network. Send a file to a user? Egress fee. Replicate to another cloud? Egress fee.

It's like AWS said 'we know you love Redis and Memcached, but hate managing servers, so here — we'll babysit them for you.' ElastiCache is managed caching

Elasticity is the cloud's ability to stretch when you need more resources and shrink when you don't — automatically and instantly.

Envoy is a high-performance proxy built by Lyft that became the backbone of modern service meshes.

FaaS is when you write a tiny function and deploy it to the cloud, and it only runs (and charges you) when someone calls it.

Fargate is AWS's 'serverless containers' magic. You run Docker containers without ever seeing or touching an EC2 server. AWS figures out where to run them.

File storage in the cloud is a shared network drive that multiple servers can mount at the same time.

FinOps is the practice of bringing financial accountability to cloud spending.

Firebase Hosting is Google's CDN-powered hosting for web apps that deploys with a single command. It's like having a valet for your website — 'firebase dep

Fly Machines are micro-VMs that start in about 300ms and run anywhere on Fly.io's global network.

Fly.io is a cool newer platform that takes your Docker container and runs it close to your users anywhere in the world.

Fly Machines are tiny VMs that start in under a second and stop automatically when idle.

Function composition in cloud terms means chaining serverless functions together to build complex workflows.

GCP is Google's version of the giant rental computer warehouse.

BigQuery is Google's 'throw all your data in here and query it in seconds' warehouse. Petabytes of data? No problem. Complex SQL joins? Sure.

Cloud Armor is Google's bouncer that stands in front of your application and blocks the riffraff.

Cloud CDN caches your content on Google's edge servers around the world.

Cloud Functions is Google's serverless compute — write a function, deploy it, and Google handles everything else.

Cloud SQL is Google managing your PostgreSQL, MySQL, or SQL Server database so you don't have to. Backups, patching, replication, failover — all handled.

Firestore is Firebase's grown-up database that works at Google Cloud scale.

Pub/Sub is Google Cloud's message bus — services publish messages to topics, and subscribers pick them up whenever they're ready.

Vertex AI is Google's ML platform that tries to make machine learning less painful. Training, deploying, monitoring models — all in one place.

GeoDNS answers DNS queries differently based on where the user is. User in Europe? Here's the European server IP. User in Asia? Here's the Asian one.

Glacier is AWS's deep-freeze storage. It's absurdly cheap — we're talking fractions of a penny per GB per month. The catch?

A headless CMS stores your content and gives it to you via API — but doesn't control how it looks.

Heroku was the OG platform that made deploying apps easy before Vercel existed.

Horizontal scaling means adding MORE servers to handle load instead of making your server bigger. Got too much traffic?

Hybrid cloud is the mix of using your own on-premise servers AND cloud services at the same time.

IAM is the permission system for AWS. It controls who (users, roles, services) can do what (read S3, start EC2, invoke Lambda) on which resources.

IaaS is when you rent the raw computer hardware in someone else's data center.

Idle resource detection finds cloud resources nobody is using. That EC2 instance 'Jeff from marketing' spun up 6 months ago and forgot about?

Infrastructure drift is when your actual cloud infrastructure doesn't match what your code says it should be.

ClickOps means building your cloud infrastructure by clicking buttons in AWS console.

Ingress is data coming INTO the cloud from outside — the opposite of egress.

An Internet Gateway is the front door of your VPC that connects it to the public internet.

Istio is a service mesh that manages how microservices talk to each other.

JAMstack stands for JavaScript, APIs, Markup.

Jump box is just another name for a bastion host — a server you 'jump' through to reach private resources.

AWS Lambda is where you upload a function and AWS runs it when something happens — an HTTP request, a file upload, a database change.

Lambda Layers are like shared backpacks for your Lambda functions.

Latency-based routing sends users to whichever server responds fastest, not just the nearest.

Linkerd is the 'I want a service mesh but Istio scares me' option. It's simpler, lighter, and easier to operate.

A managed service is when the cloud provider runs the thing for you — you don't patch it, back it up, or fix it when it crashes.

Multi-cloud means using more than one cloud provider at the same time — maybe your app runs on AWS but your data warehouse is on GCP and your CDN is Cloudf...

Multi-region deployment means running your app in multiple geographic locations simultaneously.

A NAT Gateway lets resources in a private subnet access the internet without being accessible from the internet. Your Lambda needs to call an external API?

Neon is PostgreSQL that scales to zero. When nobody's using your database, you pay nothing. When traffic spikes, it scales up automatically.

Netlify is like Vercel's cooler older sibling that was doing the automatic-deploy-from-GitHub thing before it was cool.

Network policies in Kubernetes are like firewall rules for pods.

Nixpacks is like buildpacks but powered by Nix. It auto-detects your language, figures out dependencies, and creates a Docker image.

OPA is an open-source policy engine that lets you write rules in a language called Rego. 'Can this user access this resource?

Object lifecycle policies automatically manage your cloud storage objects as they age.

Object storage treats files as 'objects' — each one gets a unique key (like a URL) and is stored with its data and metadata.

On-premise (or 'on-prem') means your servers physically live in YOUR building — not in Amazon's warehouse.

PaaS is when someone else handles the boring server stuff (OS, security patches, networking) and you just throw your code at it.

PlanetScale is MySQL on steroids with Git-like database branching. Want to test a schema change?

Platform tax is the overhead you pay — in time, complexity, and actual money — for using a platform.

Points of Presence are the physical locations where a network has servers — data centers, co-location facilities, internet exchange points.

Policy as Code means writing your rules and compliance requirements as actual code that gets enforced automatically.

Preemptible VMs are Google Cloud's version of spot instances.

Pulumi is Terraform but you use TypeScript (or Python or Go) instead of HCL. Real for-loops, real functions, real abstractions.

RDS is Amazon's managed database service.

Your database has a limited number of seats (connections), and Lambda functions are like a mob of people all trying to sit down at once. RDS Proxy is the b

RPO is how much data you can afford to lose in a disaster, measured in time. If your RPO is 1 hour, your backups need to run at least every hour.

RTO is how long you can afford to be down after a disaster. If your RTO is 4 hours, you need to be back online within 4 hours of failure.

Railway is the platform that says 'just connect your GitHub repo and we'll figure everything else out.

Railway is the 'deploy anything in 30 seconds' platform. Push your code, Railway figures out the language, installs dependencies, and deploys it.

A cloud region is a geographic area where a cloud provider has built clusters of data centers.

Render is another developer-friendly hosting platform that does web services, databases, cron jobs, and static sites all in one place.

Render is the 'we're basically Heroku but modern' platform. Web services, static sites, cron jobs, databases — all deployable from a Git push.

Reserved Instances are like buying a gym membership instead of paying per visit.

Right-sizing means matching your cloud resources to what you actually need. Running a t2.xlarge for a blog that gets 10 visitors a day?

Route 53 is Amazon's DNS service — it translates domain names like 'myapp.com' into IP addresses so browsers can find your server.

S3 is Amazon's giant file locker in the sky.

SNS is a pub/sub messaging service. One thing publishes a message (like 'new order placed!

SQS is a message queue in the cloud. One part of your app puts messages in the queue, another part picks them up and processes them later.

SST lets you define your AWS infrastructure (Lambda, DynamoDB, S3, API Gateway) in TypeScript alongside your application code.

SaaS is software you use through a browser without installing anything — you just pay a subscription and the company handles everything.

A security group is a firewall for your cloud resources. You write rules like 'allow port 443 from anywhere' or 'allow port 5432 only from the app servers.

Security groups are virtual firewalls that wrap around your cloud instances like a force field.

Self-hosted means you run the software on your own servers instead of using someone else's managed cloud version.

Sentinel is HashiCorp's policy engine for their tools — Terraform, Vault, Consul, Nomad.

Serverless doesn't mean there are no servers — it means YOU don't have to think about servers. Someone else manages them, scales them, and patches them.

Serverless functions are snippets of code that run in the cloud without you managing any servers.

A service account is a special non-human account that your app or service uses to authenticate with cloud APIs.

A spot instance is cheap cloud computing that can be taken away from you at any moment.

Spot Instances are like standby flights for cloud computing. AWS has spare capacity? You get it for up to 90% off.

A state machine is a system that can be in one of a defined set of states, transitioning between them based on inputs.

Static hosting is when you serve pre-built HTML, CSS, and JavaScript files directly — no server-side logic, no database queries per request.

Storage classes are tiers of cloud storage with different price/performance tradeoffs. Hot storage is fast and expensive (for stuff you access every day).

Supabase Auth is authentication that's already connected to your database. Sign in with Google, and your user record is instantly available in Postgres.

Supabase Edge Functions are serverless functions that run in Deno, close to your Supabase database.

Supabase Edge Functions let you run Deno code on Supabase's infrastructure. Got a Stripe webhook? An email notification to send?

Supabase Functions (Edge Functions) are Deno-powered serverless functions that run close to your users. They're like having a tiny server that springs to l

Supabase Realtime lets your app react instantly when the database changes. A new row in 'messages'? Your React component updates immediately.

Supabase Storage is file storage that respects your auth rules.

Supabase Vectors lets you store AI embeddings (those big arrays of numbers representing meaning) directly in Postgres using pgvector.

Throughput is how much actual work gets done per second — how many requests your server handles, how much data it actually transfers.

Toil is the boring, repetitive, manual work that adds no lasting value — the stuff that makes you think 'a script should do this.

Upstash Kafka gives you Apache Kafka with a REST API and serverless pricing.

Upstash is Redis that's serverless and speaks HTTP.

A VPC is your own private section of the AWS cloud — like a gated neighborhood where your servers live.

VPC Peering is like building a private bridge between two walled cities.

Vercel is the magic platform that takes your frontend code and puts it on the internet in like 30 seconds.

Vercel AI SDK is the tool that makes streaming AI responses look slick in your app.

Vercel Blob is like S3 but set up in 30 seconds. You call put() with a file, get back a URL, and Vercel serves it globally.

Vercel Cron lets you run code on a schedule without a separate cron server. Define a cron expression in vercel.

Vercel Edge Config is like a global sticky note that all your edge functions can read instantly. Need to toggle a feature flag or update a redirect map wit

Edge Runtime runs your JavaScript at the edge (near users) in a tiny V8 sandbox. Cold starts in milliseconds, not seconds. The catch: you can't use Node.

Vercel KV is managed Redis in your Vercel project. It's Upstash under the hood.

Vercel Postgres is a managed Postgres database that lives in Vercel's ecosystem. It's actually Neon under the hood.

Vertical scaling means making your existing server bigger — more CPU, more RAM, more disk.

A war room is the emergency meeting you hope you never need — when production is down, customers are screaming, and the whole team gathers (physically or v...

A warm start is when your serverless function gets a request and a container is already running from a previous invocation — so it responds instantly witho...

A workflow engine executes a series of steps in a defined order, handling branching, retries, timeouts, and failures.

Wrangler is Cloudflare's command-line tool for building and deploying Workers, Pages, KV stores, and all things Cloudflare. It's like having a remote contr

v0 is like having a designer who codes.